fp/charts/fp/templates/strapi.yaml

---
apiVersion: v1
kind: Service
metadata:
  name: strapi
  namespace: futureporn  
  annotations:
    external-dns.alpha.kubernetes.io/hostname: "{{ .Values.strapi.hostname }}"
    chisel-operator.io/exit-node-name: "strapi-exit-node"
spec:
  selector:
    app.kubernetes.io/name: strapi
  ports:
    - name: http
      port: 1339
      targetPort: http
      protocol: TCP
  type: LoadBalancer

---
apiVersion: v1
kind: Pod
metadata:
  name: strapi
  namespace: futureporn
  labels:
    app.kubernetes.io/name: strapi
spec:
  containers:
    - name: strapi
      image: "{{ .Values.strapi.imageName }}"
      ports:
        - name: http
          containerPort: 1339
      env:
        - name: ADMIN_JWT_SECRET
          valueFrom:
            secretKeyRef:
              name: strapi
              key: adminJwtSecret
        - name: API_TOKEN_SALT
          valueFrom:
            secretKeyRef:
              name: strapi
              key: apiTokenSalt
        - name: APP_KEYS
          valueFrom:
            secretKeyRef:
              name: strapi
              key: appKeys
        - name: DATABASE_URL
          valueFrom:
            secretKeyRef:
              name: strapi
              key: databaseUrl
        - name: CDN_BUCKET_USC_URL
          valueFrom:
            secretKeyRef:
              name: strapi
              key: cdnBucketUscUrl
        - name: DATABASE_CLIENT
          value: postgres
        - name: DATABASE_HOST
          value: postgres.futureporn.svc.cluster.local
        - name: DATABASE_NAME
          value: futureporn-strapi
        - name: JWT_SECRET
          valueFrom:
            secretKeyRef:
              name: strapi
              key: jwtSecret
        - name: MUX_PLAYBACK_RESTRICTION_ID
          valueFrom:
            secretKeyRef:
              name: strapi
              key: muxPlaybackRestrictionId
        - name: MUX_SIGNING_KEY_ID
          valueFrom:
            secretKeyRef:
              name: strapi
              key: muxSigningKeyId
        - name: MUX_SIGNING_KEY_PRIVATE_KEY
          valueFrom:
            secretKeyRef:
              name: strapi
              key: muxSigningKeyPrivateKey
        - name: NODE_ENV
          value: production
        - name: S3_USC_BUCKET_APPLICATION_KEY
          valueFrom:
            secretKeyRef:
              name: strapi
              key: s3UscBucketApplicationKey
        - name: S3_USC_BUCKET_ENDPOINT
          valueFrom:
            secretKeyRef:
              name: strapi
              key: s3UscBucketEndpoint
        - name: S3_USC_BUCKET_KEY_ID
          valueFrom:
            secretKeyRef:
              name: strapi
              key: s3UscBucketKeyId
        - name: S3_USC_BUCKET_NAME
          valueFrom:
            secretKeyRef:
              name: strapi
              key: s3UscBucketName
        - name: S3_USC_BUCKET_REGION
          valueFrom:
            secretKeyRef:
              name: strapi
              key: s3UscBucketRegion
        - name: SENDGRID_API_KEY
          valueFrom:
            secretKeyRef:
              name: strapi
              key: sendgridApiKey
        - name: STRAPI_URL
          value: "{{ .Values.strapi.url }}"
        - name: TRANSFER_TOKEN_SALT
          valueFrom:
            secretKeyRef:
              name: strapi
              key: transferTokenSalt
        - name: PORT
          value: "{{ .Values.strapi.port }}"
      resources:
        limits:
          cpu: 1000m
          memory: 2Gi   
  restartPolicy: Always


# ---
# apiVersion: v1
# kind: PersistentVolumeClaim
# metadata:
#   name: strapi
#   namespace: futureporn
#   annotations:
#     meta.helm.sh/release-name: fp
#     meta.helm.sh/release-namespace: futureporn
#   labels:
#     app.kubernetes.io/managed-by: {{ .Values.managedBy }}
# spec:
#   accessModes:
#     - ReadWriteOnce
#   resources:
#     requests:
#       storage: 100Gi
#   storageClassName: {{ .Values.storageClassName }}




---
apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
  name: strapi
  namespace: futureporn
  annotations:
    kubernetes.io/ingress.class: traefik
    traefik.ingress.kubernetes.io/router.entrypoints: websecure,web
    traefik.ingress.kubernetes.io/router.tls: "false"
    cert-manager.io/cluster-issuer: "{{ .Values.certManager.issuer }}"
spec:
  tls:
    - hosts:
      - "{{ .Values.strapi.hostname }}"
      secretName: strapi-cert
  rules:
    - host: "{{ .Values.strapi.hostname }}"
      http:
        paths:
        - path: /
          pathType: Prefix
          backend:
            service:
              name: strapi
              port:
                number: 1339

{{ if eq .Values.environment "development" }}
---
apiVersion: chisel-operator.io/v1
kind: ExitNode
metadata:
  name: strapi-exit-node
  namespace: futureporn
spec:
  host: "{{ .Values.chisel.exitNodeIp }}"
  port: 9090
  auth: chisel
{{ end }}